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The MAILING DATE of this communication appears on the cover sheet with the correspondence address 
Period for Reply 

A SHORTENED STATUTORY PERIOD FOR REPLY.IS SET TO EXPIRE 3 MONTH(S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1 .1 36(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If the period for reply specified above is less than thirty (30) days, a reply within the statutory minimum of thirty (30) days will be considered timely. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or. extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 
Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

1 Responsive to communication(s) filed on 08 June 2001 . 
2a)D This action is FINAL. 2b)^ This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 11, 453 O.G. 213. 

Disposition of Claims 

4) [X] Claim(s) 1-75 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) D Claim(s) is/are allowed. 

6) [X] Claim(s) 1-75 is/are rejected. 

7) D Claim(s) is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) 0 The specification is objected to by the Examiner. 

10) O The drawing(s) filed on is/are: a)0 accepted or b)\Z\ objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1 .85(a). 
Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 

11) D The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 
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2.\Z\ Certified copies of the priority documents have been received in Application No. . 
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DETAILED ACTION 

1. This action is in response to the application filed on 04/1 1/2001 . Claims 1 - 28 
were received for consideration. No preliminary amendments to the claims were filed. 
Claims 1-28 are currently being considered. 

Information Disclosure Statement 

2. An initialed and dated copy of Applicant's IDS form 1449 is attached to the Office 
action. 

Claim Rejections - 35 USC § 102 

The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 122(b), by 
another filed in the United States before the invention by the applicant for patent or (2) a patent 
granted on an application for patent by another fiied in the United States before the invention by the 
applicant for patent, except that an international application filed under the treaty defined in section 
351(a) shall have the effects for purposes of this subsection of an application filed in the United States 
only if the international application designated the United States and was published under Article 21(2) 
of such treaty in the English language. 

3. Claims 1 - 66, 68 - 70 and 72 - 75 are rejected under 35 U.S.C. 102(e) as being 
anticipated by Gai et al. (U.S. Patent Number 6,167,445). 
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Regarding Claim 1, Gai teaches and describes a network configuration 
management system (Fig. 3-5; Summary and Column 7 line 55 - Column 20 line 41 ), 
comprising: 

a policy engine which generates configlets for a selected device (Column 9 line 
59 - Column 10 line 9); and 

a combiner which combines the configlets to form at least one configuration file 
(Column 6 line 58 - Column 7 line 10 and Column 10 lines 13 - 34). 

Regarding Claim 35, Gai teaches and describes a method for managing network 
configurations (Fig. 3-5; Summary and Column 7 line 55 - Column 20 line 41 ), 
comprising: 

generating configlets for a selected device (Column 9 line 59 - Column 10 line 
9); and 

combining the configlets to form at least one configuration file (Column 6 line 58 
- Column 7 line 10 and Column 10 lines 13 - 34). 

Regarding Claim 66, Gai teaches and describes a method of accessing a 
configuration setup on a network device (Fig. 3-5; Summary and Column 7 line 55 - 
Column 20 line 41 ), comprising: 

maintaining login information for access to the device in the device and 
in a configuration server (Column 12 lines 41 - 54); 

maintaining, in the server, login information for access from a user to the 
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server and device access rights for the user (Column 1 2 lines 41 - 67); and 

accessing the configuration setup of the device by a user through the server by 
the user accessing the server and the server accessing the device (Column 12 lines 41 
- 67 and Column 13 line 63 - Column 14 line 23). 

Regarding Claim 70, Gai teaches and describes a configuration server for 
enabling configuration set up of network devices (Fig. 3-5; Summary and Column 7 
line 55 - Column 20 line 41 ), comprising: 

storage including login information for access to the device, login information for 
access from a user to the server, and device access rights for the user (Column 12 lines 
41 -67); and 

an access processor enabling a user to set up configuration of the device 
through the server by the user accessing the server and the server accessing the 
device (Column 12 lines 41 - 67 and Column 13 line 63 - Column 14 line 23). 

Regarding Claim 74, Gai teaches and describes a system for managing network 
configurations (Fig. 3-5; Summary and Column 7 line 55 - Column 20 line 41 ), 
comprising: 

means for generating configlets based on a selected feature set target level and 
a selected device (Column 9 line 59 - Column 10 line 9); and 
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means for translating and combining the confglets to form vendor-dependent 
configuration files (Column 5 line 63 - Column 6 line 26;Column 6 line 58 - Column 7 
line 10; Column 10 lines 13-34 and Column 13 line 63 - Column 14 line 28). 

Regarding Claim 75, Gai teaches and describes a system of accessing a 
configuration setup on a network device (Fig. 3-5; Summary and Column 7 line 55 - 
Column 20 line 41), comprising: 

means for maintaining login information for access to the device in the device 
and in a configuration server (Column 12 lines 41 - 54); 

means for maintaining, in the server, login information for access from a user to 
the server and device access rights for the user (Column 12 lines 41 - 54); and 

means for accessing the configuration setup of the device by a user through the 
server by the user accessing the server and the server accessing the device (Column 
12 lines 41 - 67 and Column 13 line 63 - Column 14 line 23). 

Claims 2 and 36 are rejected as applied above in rejecting claims 1 and 35. 
Furthermore, Gai teaches and describes a network configuration management system 
(Fig. 3-5; Summary and Column 7 line 55 - Column 20 line 41), wherein at least one 
of the configlets is vendor-neutral, further comprising: 

a translator which translates the at least one vendor-neutral configlet to a vendor- 
specific configlet (Column 5 line 63 - Column 6 line 26;Column 6 line 58 - Column 7 
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line 10; Column 9 line 36 - Column 10 line 34 and Column 13 line 63 - Column 14 line 
28). 

Claims 3 and 37 are rejected as applied above in rejecting claims 1 and 35. 
Furthermore, Gai teaches and describes (Fig. 3-5; Summary and Column 7 line 55 - 
Column 20 line 41 ), wherein at least one of the configlets is vendor-specific (Column 5 
line 63 - Column 6 line 26;Column 6 line 58 - Column 7 line 1 0; Column 9 line 36 - 
Column 10 line 34 and Column 13 line 63 -Column 14 line 28). 

Claims 4 and 38 are rejected as applied above in rejecting claims 1 and 35. 
Furthermore, Gai teaches and describes (Fig. 3-5; Summary and Column 7 line 55 - 
Column 20 line 41 ), wherein the configlets are generated based on a selected feature 
set target level (Column 5 line 63 - Column 6 line 26;Column 6 line 58 - Column 7 line 
10; Column 9 line 36 - Column 10 line 34 and Column 13 line 63 - Column 14 line 28). 

Claims 19 and 50 are rejected as applied above in rejecting claims 1 and 35. 
Furthermore, Gai teaches and describes (Fig. 3-5; Summary and Column 7 line 55 - 
Column 20 line 41 ), a configlet hierarchy, wherein a child configlet inherits properties 
which it does not define from its parent (Column 5 line 63 - Column 6 line 48). 
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Claims 20 and 51 are rejected as applied above in rejecting claims 1 and 35. 
Furthermore, Gai teaches and describes (Fig. 3-5; Summary and Column 7 line 55 - 
Column 20 line 41 ), further comprising: 

a mapping function for mapping infrastructure data in a first format to a 
second format, the second format being recognizable by the policy engine (Column 10 
lines 13-35 and Column 19 lines 3 - 36). 

Claims 21 and 52 are rejected as applied above in rejecting claims 1 and 35. 
Furthermore, Gai teaches and describes (Fig. 3-5; Summary and Column 7 line 55 - 
Column 20 line 41 ), further comprising: 

a loader for loading a configuration file to its intended device (Column 13 lines 1 
- 14; Column 14 line 64 - Column 15 line 42 and Column 19 lines 3 - 36). 

Claims 24 and 55 are rejected as applied above in rejecting claims 1 and 35. 
Furthermore, Gai teaches and describes (Fig. 3-5; Summary and Column 7 line 55 - 
Column 20 line 41), wherein a device is one of the group comprising a router, a switch, 
a bridge, a firewall, a hub, an interface, a web hosting server, a DNS server and a 
virtual interface (Column 7 line 55 - Column 8 line 65). 

Claims 25 and 56 are rejected as applied above in rejecting claims 1 and 35. 
Furthermore, Gai teaches and describes (Fig. 3-5; Summary and Column 7 line 55 - 
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Column 20 line 41 ), further comprising: a configuration archive (Column 9 line 59 - 
Column 10 line 9; Column 19 lines 21 -40). 

Claims 28 and 59 are rejected as applied above in rejecting claims 1 and 35. 
Furthermore, Gai teaches and describes (Fig. 3-5; Summary and Column 7 line 55 - 
Column 20 line 41 ), further comprising: 

a reverse-translator which produces vendor-neutral configlets from a 
configuration file, wherein a configuration is read back from a device (Column 13 line 63 
-Column 14 line 23 and Column 17 line 33-48). 

Claim 30 is rejected as applied above in rejecting claim 1. Furthermore, Gai 
teaches and describes (Fig. 3-5; Summary and Column 7 line 55 - Column 20 line 
41), wherein the system retains login information to the devices, such that a user 
desiring to connect to a device must log in to the system, the system connecting to the 
device (Column 1 1 lines 26 - 43 and Column 1 7 lines 3-19). 

Claims 32 and 63 are rejected as applied above in rejecting claims 1 and 35. 
Furthermore, Gai teaches and describes (Fig. 3-5; Summary and Column 7 line 55 - 
Column 20 line 41), wherein the policy engine generates configlets for plural 
selected devices (Column 7 line 55 - Column 8 line 25 and Column 16 lines 44 - 47). 



Application/Control Number: 09/877,209 Page 9 

Art Unit: 2136 

Claims 33 and 64 are rejected as applied above in rejecting claims 1 and 35. 
Furthermore, Gai teaches and describes (Fig. 3-5; Summary and Column 7 line 55 - 
Column 20 line 41 ), wherein at least one of said configuration files comprises a full 
configuration (Column 7 line 55 - Column 8 line 25 and Column 16 line 44 - Column 17 
line 19). 

Claims 34 and 65 are rejected as applied above in rejecting claims 1 and 35. 
Furthermore, Gai teaches and describes (Fig. 3-5; Summary and Column 7 line 55 - 
Column 20 line 41 ), wherein at least one of said configuration files comprises 
a partial configuration (Column 7 line 55 - Column 8 line 25 and Column 16 lines 44 - 
47). 

Claims 68 and 72 are rejected as applied above in rejecting claims 1 and 35. 
Furthermore, Gai teaches and describes (Fig. 3 - 5; Summary and Column 7 line 55 - 
Column 20 line 41), comprising: monitoring communication between the user and the 
device (Column 19 line 63 - Column 20 line 9). 

Claims 69 and 73 are rejected as applied above in rejecting claims 1 and 35. 
Furthermore, Gai teaches and describes (Fig. 3-5; Summary and Column 7 line 55 - 
Column 20 line 41), further comprising: recording communications between the user 
and the device (Column 5 line 63 - Column 7 line 25 and Column 18 line 46 - Column 
19 line 36). 
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Claims 5 and 39 are rejected as applied above in rejecting claims 1 and 35. 
Furthermore, Gai teaches and describes (Fig. 3-5; Summary and Column 7 line 55 - 
Column 20 line 41), wherein the policy engine generates the configlets using policies 
associated with the selected target level (Column 5 line 63 - Column 6 line 35 and 
Column 1 9 line 43 - Column 20 line 1 5) 

Claims 22 and 53 are rejected as applied above in rejecting claims 1 and 35. 
Furthermore, Gai teaches and describes (Fig. 3-5; Summary and Column 7 line 55 - 
Column 20 line 41 ), further comprising: a scheduler for scheduling the loading of a 
configuration to its intended device (Column 10 lines 13-35 and Column 19 lines 15- 
60). 

Claims 23 and 54 are rejected as applied above in rejecting claims 1 and 35. 
Furthermore, Gai teaches and describes (Fig. 3-5; Summary and Column 7 line 55 - 
Column 20 line 41), wherein multiple configurations are batched together to be 
scheduled for loading to their intended devices (Column 5 line 63 - Column 6 line 26; 
Column 1 0 lines 1 3 - 35 and Column 1 7 line 63 - Column 1 8 line 23). 

Claims 26 and 57 are rejected as applied above in rejecting claims 1 and 35. 
Furthermore, Gai teaches and describes (Fig. 3-5; Summary and Column 7 line 55 - 



Application/Control Number: 09/877,209 Page 1 1 

Art Unit: 2136 

Column 20 line 41), wherein generated configurations are stored in the archive (Column 
9 line 59 - Column 10 line 9 and Column 14 lines 24-40). 

Claims 27 and 58 are rejected as applied above in rejecting claims 1 and 35. 
Furthermore, Gai teaches and describes (Fig. 3-5; Summary and Column 7 line 55 - 
Column 20 line 41), wherein configurations are uploaded from devices and are stored in 
the archive (Column 13 lines 1 - 14; Column 14 line 64 - Column 15 line 42 and 
Column 19 lines 3-36). 

Claims 29 and 60 are rejected as applied above in rejecting claims 1 and 35. 
Furthermore, Gai teaches and describes (Fig. 3-5; Summary and Column 7 line 55 - 
Column 20 line 41), wherein a first device using a first configuration format is replaced 
with a second device using a second configuration format, and wherein the first device's 
configuration is read in and reverse-translated into vendor-neutral configlets, the 
vendor-neutral configlets then being translated into a configuration formatted for the 
second device (Column 14 line 64 - Column 16 line 53). 

Claim 31 is rejected as applied above in rejecting claim 1. Furthermore, Gai 
teaches and describes (Fig. 3-5; Summary and Column 7 line 55 - Column 20 line 
41 ), wherein the system passes commands from the user to the device, and responses 
from the device to the user (Column 1 1 lines 26 - 43 and Column 1 7 lines 3-19). 



Application/Control Number: 09/877,209 Page 12 

Art Unit: 2136 

Claims 6 and 40 are rejected as applied above in rejecting claims 1 and 35. 
Furthermore, Gai teaches and describes (Fig. 3-5; Summary and Column 7 line 55 - 
Column 20 line 41), further comprising: a target hierarchy, wherein the policy engine 
generates the configlets using policies associated with the selected target level and its 
sub-target levels, as defined by the target hierarchy (Summary; Column 10 line 59 - 
Column 1 1 line 43 and Column 13 lines 1-15). 

Claims 7 and 41 are rejected as applied above in rejecting claims 1 and 35. 
Furthermore, Gai teaches and describes (Fig. 3-5; Summary and Column 7 line 55 - 
Column 20 line 41), wherein a policy comprises: a condition; and an action which the 
policy engine performs if the condition is true (Column 15 line 5 - Column 16 line 20). 

Claims 9 and 43 are rejected as applied above in rejecting claims 1 and 35. 
Furthermore, Gai teaches and describes (Fig. 3-5; Summary and Column 7 line 55 - 
Column 20 line 41), wherein a policy further comprises: a verification clause (Column 15 
lines 5 - 54). 

Claims 15 and 46 are rejected as applied above in rejecting claims 1 and 35. 
Furthermore, Gai teaches and describes (Fig. 3-5; Summary and Column 7 line 55 - 
Column 20 line 41), wherein a second policy is dependent on a first policy, requiring that 
the second policy be evaluated after the first policy (Summary; Column 13 lines 1 - 35 
and Column 14 line 64 - Column 1 6 line 53). 
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Claims 17 and 48 are rejected as applied above in rejecting claims 1 and 35. 
Furthermore, Gai teaches and describes (Fig. 3-5; Summary and Column 7 line 55 - 
Column 20 line 41), wherein a policy is written in a programming language (Column 8 
line 26 -Column 9 line 10) 

Claims 8 and 42 are rejected as applied above in rejecting claims 1 and 35. 
Furthermore, Gai teaches and describes (Fig. 3-5; Summary and Column 7 line 55 - 
Column 20 line 41), wherein the policy action performed by the policy engine causes the 
policy engine to write to at least a partial configlet (Column 18 line 45 - Column 19 line 
36). 

Claim 13 is rejected as applied above in rejecting claim 1. Furthermore, Gai 
teaches and describes (Fig. 3-5; Summary and Column 7 line 55 - Column 20 line 
41), wherein a policy farther comprises: documentation (Column 17 line 63 -Column 18 
line 44). 

Claim 10 is rejected as applied above in rejecting claim 1. Furthermore, Gai 
teaches and describes (Fig. 3-5; Summary and Column 7 line 55 - Column 20 line 
41 ), wherein the verification clause is used to verify a configuration (Column 1 5 lines 5 - 
54). 
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Claims 16 and 47 are rejected as applied above in rejecting claims 1 and 35. 
Furthermore, Gai teaches and describes (Fig. 3-5; Summary and Column 7 line 55 - 
Column 20 line 41), wherein the first policy generates and stores a value to be used by 
the second policy (Summary; Column 13 lines 1 - 35 and Column 14 line 64 - Column 
16 line 53). 

Claims 18 and 49 are rejected as applied above in rejecting claims 1 and 35. 
Furthermore, Gai teaches and describes (Fig. 3-5; Summary and Column 7 line 55 - 
Column 20 line 41), wherein the programming language is Pearl with extensions 
(Column 7 lines 1 1 - 27 and Column 1 7 lines 50 - 62). 

Claim 14 is rejected as applied above in rejecting claim 1. Furthermore, Gai 
teaches and describes (Fig. 3-5; Summary and Column 7 line 55 - Column 20 line 
41), wherein the policy documentation comprises: a reason; and a description 
(Summary; Column 17 line 63 - Column 18 line 44). 

Claims 1 1 and 45 are rejected as applied above in rejecting claims 1 and 35. 
Furthermore, Gai teaches and describes (Fig. 3-5; Summary and Column 7 line 55 - 
Column 20 line 41 ), further comprising: 

a reverse-translator which produces configlets from a configuration file, wherein 
the verification clause verifies the configuration file by examining configlets produced by 
the reverse-translator (Column 14 line 64 - Column 16 line 53). 
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Claims 12 and 44 are rejected as applied above in rejecting claims 1 and 35. 
Furthermore, Gai teaches and describes (Fig. 3-5; Summary and Column 7 line 55 - 
Column 20 line 41 ), wherein the configuration is from a running network device (Column 
18 line 24 - Column 20 line 28) 



Claim Rejections - 35 USC § 103 



The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 



4. Claims 67 and 71 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Gai et al. (U.S. Patent Number 6,167,445, hereinafter, "Gai") in view of Rothermel 
et al. (U.S. Patent Number 6,678,827, hereinafter, "Rothermer"). 

Claims 67 and 71 are rejected as applied above in rejecting claims 1 and 35. 
Furthermore, Gai teaches and describes (Fig. 3-5; Summary and Column 7 line 55 - 
Column 20 line 41), wherein the device login information is maintained (Column 19 lines 
43 - 56). Gai does not explicitly discloses that the maintained device login information is 
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stored encrypted. However, Rothermel discloses using a manager device to remotely 
manage multiple network security devices wherein the maintained device login 
information is encrypted (Column 16 lines 24 - 59) to determine the level of security to 
provide access to the device or service. Therefore, it would have been obvious to a 
person of ordinary skill in the art at the time the invention was made to incorporate the 
teachings of Rothermel into the teachings of Gai to have a system wherein the device 
login information is stored encrypted that provides access privileges and to block a 
hacker attack on the network devices. 



Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Pramila Parthasarathy whose telephone number is 571- 
272-3866. The examiner can normally be reached on 8:00a.m. To 5:00p.m.. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz Sheikh can be reached on 571-232-3795. 

Any inquiry of a general nature or relating to the status of this application or 
proceeding should be directed to the receptionist whose telephone number is 703-305- 
3900. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for published 
applications may be obtained from either Private PAIR or Public PAIR only. For more 
information about the PAIR system, contact the Electronic Business Center (EBC) at 
866-217-9197 (toll-free). 



Pramila Parthasarathy 
October 28, 2004. 
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